Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
File: p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft (raw, json)
Hash identifier: hy/KCgirEqJb7K/Wt0gz9y2vCG3L2cmG8+yVZsaxSlY=
Subject key identifier: F0:DD:D8:FF:BE:E5:46:E4:35:14:DF:D9:D7:A0:BC:B8:32:75:87:6F
Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Certificate serial: 019DB3C706363A471C7AFE091D098FDEE88F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
Manifest number: 18F9
Signing time: Wed 22 Apr 2026 06:00:57 +0000
Manifest this update: Wed 22 Apr 2026 06:00:57 +0000
Manifest next update: Thu 23 Apr 2026 06:00:57 +0000
Files and hashes: 1: 7RRyo5mrSZHKaCfweZimJC0UI0A.roa (hash: LQwFNkqaemk7BQFWfMSkrEO4PRaAlztizBh/5pehkzc=)
2: bXeDjlFQZxCvvfoeElvquanHuZA.roa (hash: RDVCaZsRUDJaMXpntgU8V0AZhyelN+TpLVWyUrhvuTY=)
3: bc0mGww2GImeLw53tIRJtqt1goo.asa (hash: sLme9hQtgnCHpEldpCRLHVOEKrZFO2bAZpniqL80jV4=)
4: cduC2GbU6mLXIEEHAt29JqjeJ_c.roa (hash: sBtHQn0mqBf5vLWH/WxAyxQgtkjINRc/CcTzUpuSllU=)
5: p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl (hash: 9NTqMPUpOinUl8+ZWSgR7oBtbBw+IQNINE4x7KOY5iI=)
6: pkUUzqA3QbThc7oqdUnjxN9QYMU.roa (hash: RswzhGW9W7Aa5lMfftJP3fP15HlpGxcfnXUCf1iUSNg=)
7: uGGHB9Av3_ThaGzwH8xxsyY9IAk.roa (hash: EQLCZ4pDh+GlnlGdR0v0R9xaKh+vfEuApMYZeBAUdys=)
8: zOPM5DQVOuL2gxGFfQ2OogcDlag.roa (hash: TZhWdIY554lkmlZSQhc2076I8ib8niBs3eBXmmFEKfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b3:c7:06:36:3a:47:1c:7a:fe:09:1d:09:8f:de:e8:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Validity
Not Before: Apr 22 06:00:57 2026 GMT
Not After : Apr 23 06:00:57 2026 GMT
Subject: CN=f0ddd8ffbee546e43514dfd9d7a0bcb83275876f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f6:81:a8:c0:82:8b:35:fe:09:b8:80:17:91:
93:79:96:39:9e:fb:53:99:1a:65:54:56:bc:56:f8:
04:34:c5:aa:8c:17:76:01:9e:8d:ab:97:a7:85:f4:
75:37:0f:12:11:4e:90:bc:a7:b6:da:77:cd:a1:fa:
14:66:85:b1:68:5d:7f:cc:05:b8:97:f6:5e:87:57:
63:39:27:1c:58:49:c8:c2:b8:c4:57:e4:0b:91:a1:
e0:f0:eb:22:96:bf:e6:92:7d:3b:c3:c9:72:70:03:
41:7d:43:f4:b9:8b:17:c9:02:64:ee:c1:cd:7d:df:
08:04:3d:b9:63:15:81:af:f8:8b:36:bc:6c:be:a8:
28:a2:19:47:de:1d:5a:28:cf:e1:14:c0:1f:78:c7:
35:1e:9a:26:91:9f:0b:cd:d8:d4:be:d7:b9:f1:3a:
f6:fd:e5:00:2e:1d:0b:ed:ca:3b:a4:c0:f7:06:66:
4f:c3:2d:38:ba:94:36:17:ff:33:dc:f8:7a:be:a8:
05:c5:c2:97:7f:4d:c8:12:41:4e:c2:56:e1:b5:41:
1d:93:4d:74:66:d8:2f:1a:3d:ed:ec:2a:c4:65:3e:
05:77:28:a5:07:57:02:63:31:ff:2c:2c:11:6c:a3:
ea:f4:19:a2:7d:df:f9:a2:aa:d4:52:8c:d2:e3:01:
7a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DD:D8:FF:BE:E5:46:E4:35:14:DF:D9:D7:A0:BC:B8:32:75:87:6F
X509v3 Authority Key Identifier:
keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:2c:ed:f2:26:9c:41:eb:93:e0:e7:d5:89:05:6e:2b:36:90:
8a:6e:6e:84:f6:b8:f8:c8:08:13:1d:74:9b:d9:7d:1e:f9:99:
c2:48:bb:87:78:73:92:d5:be:74:6f:06:0b:a5:8b:57:eb:75:
e8:19:7e:ca:f2:df:5e:21:0f:3f:16:67:f6:24:d4:76:83:7b:
3a:e9:0b:3a:64:1c:e3:29:6f:1d:0b:38:ea:aa:97:ec:bb:2d:
dc:63:09:92:89:3d:9d:60:18:a5:47:21:d0:b1:8f:bb:93:ce:
46:a9:c1:94:a0:cb:d9:5d:ac:fc:e4:98:15:c4:cd:e0:ee:f4:
b1:91:cb:58:12:5c:d4:76:81:5f:74:e1:89:da:a9:0b:a6:e8:
bb:00:31:87:75:cc:ec:56:91:b2:c1:fd:2e:f7:44:21:cf:34:
80:1f:49:88:6a:27:82:70:5f:c1:8d:40:60:e1:e1:99:de:c8:
81:d7:d8:20:39:f2:b7:6e:48:36:e9:43:68:f8:df:8a:0a:ed:
30:10:9a:09:7e:62:47:f1:63:17:93:17:43:84:3a:22:0b:90:
f6:56:45:49:6d:1a:24:a7:be:cb:79:c5:f6:82:be:2e:58:7b:
04:11:41:cf:94:80:4c:91:36:9a:14:96:b8:6b:8f:8b:80:a4:
1c:e9:fe:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 08:31:53 2026 by rpki-client